JP2011155521A - Method for authentication of mobile station device and base station apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mobile station device capable of improving a possibility where a communication device for transmitting counterfeited network identification information and base station identification information is identified with a method simpler than the authentication by certificate data. <P>SOLUTION: The mobile station device 100 includes: a base station information memory 108 for storing the base station apparatus information about each of a plurality of base station apparatus: a control unit 102 for obtaining communication device information about the communication devices from each of a plurality of signals received from the plurality of communication devices; and a base station authentication unit 104 for determining if the communication devices included in the plurality of communication devices are included in the plurality of base station apparatus on the basis of the base station apparatus information and the plurality of communication device information. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a mobile station apparatus and a base station apparatus authentication method.

  In the mobile communication system 400 in which communication is performed between the mobile station apparatus 100 and the base station apparatus 200 compliant with the iBurst (registered trademark) system or the like, The base station apparatus 200 and the communication apparatus 300 that receive the identification information transmitted from the station apparatus 200 and the communication apparatus 300, perform authentication processing using the received identification information, and each of the base station apparatus 200 and the communication apparatus 300 that transmitted the identification information is valid. And the communication with the one determined to be a valid base station apparatus is executed.

  FIG. 2 is a diagram showing a mobile communication system 400. In mobile communication system 400, mobile station apparatus 100 receives network identification information and base station apparatus identification information from base station apparatus 200 and communication apparatus 300. The mobile station device 100 performs authentication processing of the base station device 200 and the communication device 300 using the network identification information and the base station device identification information received from the base station device 200 and the communication device 300, respectively.

  Patent Document 1 discloses a terminal device that authenticates a base station device using a roaming list.

JP 2004-357214 A

  When a communication device 300 (illegal base station device) that transmits network identification information and base station identification information forged to impersonate the base station device 200 included in the mobile communication system 400 is installed, the mobile station device 100 The communication apparatus 300 is authenticated with the legitimate base station apparatus 200 and communication is executed. Further, if the mobile station apparatus 100 confirms the network identification information and the base station identification information, the mobile station apparatus 100 authenticates the communication apparatus 300 that transmits them with the valid base station apparatus 200. Even if the communication device 300 is located at a communicable position even if it is located outside the service area of the system 400, communication with the communication device 300 is executed. As a method for identifying such a communication apparatus 300, there is authentication by sending / receiving certificate data that is difficult to counterfeit compared to network identification information and base station identification information, but authentication by sending / receiving certificate data is complicated. It is difficult to introduce.

  The present invention provides a mobile station apparatus 100 that improves the possibility of identifying a communication apparatus 300 that transmits forged network identification information and base station identification information in a manner that is easier than authentication using certificate data. Objective.

  In order to achieve the above object, a mobile station apparatus according to the present invention includes a base station apparatus information storage unit that stores base station apparatus information related to each of a plurality of base station apparatuses, and a plurality of base station apparatus information received from a plurality of communication apparatuses. Communication included in the plurality of communication devices based on communication device information acquisition means for acquiring communication device information relating to the communication device from each of the signals, the base station device information, and the plurality of communication device information Determination means for performing determination processing for determining whether or not a device is included in the plurality of base station devices.

  According to the present invention, since the determination process (authentication process) is performed based on the communication apparatus information regarding each of the plurality of communication apparatuses, for example, a communication apparatus that transmits forged network identification information and base station identification information (unauthorized) When only one base station device is provided, the possibility of identifying the communication device increases.

  In one aspect of the present invention, the base station apparatus information includes identification information of each of the plurality of base station apparatuses, and combination information indicating a combination of the identification information received in a predetermined period. The communication device information includes identification information of the communication device that has transmitted the signal that provides the communication device information, and the determination unit includes the combination information and each of the plurality of signals received in the period. The determination processing is performed based on the combination of the identification information acquired by the communication device information acquisition means.

  According to this aspect, since the determination process (authentication process) is performed based on the combination of the identification information (base station apparatus identification information) of each of the plurality of communication apparatuses, for example, forged network identification information and base station identification information In the case where only one communication device (unauthorized base station device) is provided, it is highly likely that the communication device is identified.

  Further, another mobile station apparatus according to the present invention includes a base station apparatus information storage unit that stores identification information and position information of each of a plurality of base station apparatuses, and a plurality of signals received from a plurality of communication apparatuses. Communication device information acquisition means for acquiring identification information and geographical information of the communication device, the identification information and location information acquired by the base station device information acquisition means, and the communication device information acquisition means. Determination means for performing a determination process for determining whether a communication device included in the plurality of communication devices is included in the plurality of base station devices based on the plurality of identification information and the plurality of geographical information. Have.

  According to the present invention, since the determination process (authentication process) is performed based on the identification information of each of the plurality of communication devices and the geographical information that is more difficult to impersonate than the identification information, the forged network identification information and the base station There is a high possibility that a communication device (an unauthorized base station device) that transmits identification information is identified.

  In one aspect of the present invention, the geographical information is information indicating a distance between the communication apparatus that has transmitted the signal that provides the geographical information and the mobile station apparatus.

  According to this aspect, since the determination process (authentication process) is performed based on the identification information of each of the plurality of communication devices and the distance information that is more difficult to impersonate than the identification information, the forged network identification information and the base station identification There is a high possibility that a communication device (an unauthorized base station device) that transmits information is identified.

  In one aspect of the present invention, the geographical information is information indicating a direction of the communication apparatus that has transmitted the signal providing the geographical information to the mobile station apparatus.

  According to this aspect, since the determination process (authentication process) is performed based on the identification information of each of the plurality of communication devices and the information indicating the direction in which impersonation is more difficult than the identification information, the forged network identification information and the base There is a high possibility that a communication apparatus (an unauthorized base station apparatus) that transmits station identification information is identified.

  Further, another mobile station apparatus according to the present invention includes a base station information storage unit that stores identification information and position information of a plurality of base station apparatuses, identification information from a signal received from the communication apparatus, and the communication apparatus Communication apparatus information acquisition means for acquiring the identification information and the position information stored by the base station information storage means, the identification information acquired by the communication apparatus information acquisition means, and the position Determination means for performing a determination process for determining whether or not the communication apparatus is included in the plurality of base station apparatuses based on the information.

  According to the present invention, since the determination process (authentication process) is performed based on the identification information of each communication device and the position information that is more difficult to impersonate than the identification information, the forged network identification information and the base station identification information are There is a high possibility that a transmitting communication device (an unauthorized base station device) is identified.

  Further, another mobile station apparatus according to the present invention includes means for storing service area information indicating an area defined as being capable of communication by the mobile station apparatus, means for acquiring position information of the mobile station apparatus, And authentication means for authenticating the base station apparatus based on the service area information and the location information.

  According to the present invention, since the determination process (authentication process) is performed based on the identification information of each communication device and the service area information that is very difficult to impersonate, the forged network identification information and the base station identification information There is a high possibility that a transmitting communication device (an unauthorized base station device) is identified.

  Moreover, in one aspect of the present invention, the base station information storage means permits the rewriting of stored information by a predetermined method.

  In addition, the authentication method for a base station apparatus according to the present invention includes a step of storing base station apparatus information relating to each of a plurality of base station apparatuses, and a plurality of signals received from the plurality of communication apparatuses. The communication device included in the plurality of communication devices is included in the plurality of base station devices based on the step of acquiring communication device information relating to the base station device information and the plurality of communication device information And a determination process for determining whether or not.

  Further, another base station apparatus authentication method according to the present invention includes a base station apparatus information acquisition step for storing identification information and position information of a plurality of base station apparatuses, and a plurality of base station apparatus information received from a plurality of communication apparatuses. A communication device information acquisition step for acquiring identification information and geographical information of the communication device from each of the signals; the identification information and position information acquired in the base station device information acquisition step; and the communication device information acquisition step. A determination process is performed to determine whether or not a communication device included in the plurality of communication devices is included in the plurality of base station devices based on the plurality of identification information and the plurality of geographical information acquired in A determination step.

  Further, another authentication method of a base station apparatus according to the present invention includes a base station information storage step for storing identification information and position information of a plurality of base station apparatuses, identification information from a signal received from a communication apparatus, The communication device information acquisition step for acquiring the communication device position information, the identification information and the position information stored in the base station information storage step, and the identification information acquired in the communication device information acquisition step And a determination step of performing determination processing for determining whether or not the communication apparatus is included in the plurality of base station apparatuses based on the position information.

  Further, another base station apparatus authentication method according to the present invention includes a step of storing service area information indicating an area defined as being capable of communication by a mobile station apparatus, and a step of acquiring position information of the mobile station apparatus And authenticating a base station apparatus based on the service area information and the location information.

It is a figure which shows the structure of the mobile station apparatus which concerns on 1st Embodiment. It is a figure which shows a mobile communication system. It is a flowchart which shows the base station apparatus authentication process performed by the mobile station apparatus. It is a figure which shows the structure of the data memorize | stored in a base station information storage part. It is a figure which shows the structure of the mobile station apparatus which concerns on 2nd Embodiment. It is a flowchart which shows the base station apparatus authentication process performed by the mobile station apparatus. It is a figure which shows the structure of the data memorize | stored in a base station information storage part. It is a figure which shows the concept of the determination process using distance information. It is a figure which shows the concept of the determination process using distance information. It is a figure which shows the concept of the determination process using direction information. It is a figure which shows the concept of the determination process using direction information. It is a figure which shows the structure of the mobile station apparatus which concerns on 3rd Embodiment. It is a flowchart which shows the base station apparatus authentication process performed by the mobile station apparatus. It is a figure which shows the structure of the mobile station apparatus which concerns on 4th Embodiment. It is a flowchart which shows the base station apparatus authentication process performed by the mobile station apparatus. It is a figure which shows the structure of the data memorize | stored in a base station information storage part. It is a figure which shows the structure of the data memorize | stored in a service area information storage part.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments for carrying out the invention (hereinafter referred to as embodiments) will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a diagram illustrating a configuration of a mobile station apparatus 100 according to the first embodiment. The mobile station apparatus 100 performs an authentication process using a combination of identification information received from a plurality of communication apparatuses (base station apparatus 200 and communication apparatus 300), and communicates with those authenticated with the legitimate base station apparatus 200. Execute. The mobile station apparatus 100 includes a control unit 102, a base station authentication unit 104, a radio communication hardware unit 106, a base station information storage unit 108, an available base station information storage unit 110, and an antenna 112.

  The control unit 102 is realized as one function of the CPU, and controls the operation of the mobile station apparatus 100. The control unit 102 also receives network identification information and base station device identification, which are communication device information related to the communication device, from each of the plurality of signals received from the plurality of communication devices input from the wireless communication hardware unit 106. Information is acquired and output to the base station authentication unit 104.

  The base station authentication unit 104 is realized as a function of the CPU, and includes base station device information stored in the base station information storage unit 108, network identification information that is communication device information acquired by the control unit 102, and base station device identification. And a plurality of base station devices indicated by the base station device information stored in the base station information storage unit 108 are transmitted by the plurality of communication devices that have transmitted the network identification information and the mobile station device identification information. A determination process (authentication process, base station apparatus authentication process) is performed to determine whether or not it is included in a legitimate base station apparatus. Details of the authentication process will be described later.

  The wireless communication hardware unit 106 includes a semiconductor circuit, executes communication processing such as modulation processing, amplification processing, A / D conversion, and D / A conversion, and performs wireless communication via the antenna 112. The wireless communication hardware unit 106 transmits data input from the control unit 102 via the antenna 112, generates reception data from a signal received via the antenna 112, and outputs the received data to the control unit 102.

  The base station information storage unit 108 includes a memory, and stores base station information regarding a plurality of base station devices 200 included in the mobile communication system 400. Data stored in the base station information storage unit 108 is generated in advance and is written in the base station information storage unit 108 when the mobile station device 100 is manufactured, for example. The base station information storage unit 108 has a configuration that permits rewriting of information by a predetermined method. For example, the base station information storage unit 108 can be rewritten only when a predetermined keyword is input, or a predetermined encryption / decryption process. In this configuration, writing / reading is performed via the. Details of the base station information stored in the base station information storage unit 108 will be described later.

  The available base station information storage unit 110 is realized as a function of the CPU, and stores identification information of the communication device 300 authenticated by the base station authentication unit 104 and the authorized (available) base station device 200.

  Details of the base station apparatus authentication process executed by the mobile station apparatus 100 will be described below. FIG. 3 is a flowchart showing base station apparatus authentication processing executed by the mobile station apparatus 100.

  The base station information storage unit 108 of the mobile station device 100 stores base station information regarding a plurality of base station devices 200 included in the mobile communication system 400. FIG. 4 is a diagram showing a configuration of data stored in the base station information storage unit 108. The base station information storage unit 108 includes, as base station information regarding the base station device 200, network identification information indicating the mobile communication system 400 and base station device identification information of all base station devices 200 included in the mobile communication system 400. Are stored, and combination information 404 indicating combinations of base station apparatus identification information that can be received within a predetermined period such as in the same frame. The combination of base station apparatus identification information indicated by the combination information 404 is a combination of base station apparatus identification information of base station apparatuses included in a region having a predetermined area such as a circle having a radius of a communicable distance.

  The control unit 102 acquires network identification information and base station apparatus identification information from data input from the wireless communication hardware unit 106 (S300), and collects these pieces of information received in a predetermined period such as the same frame, for example. To the base station authenticating unit 104.

  The base station authenticating unit 104 first determines whether the network identification information and the base station device identification information input from the control unit 102 are included in the all base station device information 402 in the base station information storage unit 108 (S301). Only those included are extracted as targets for subsequent authentication processing.

  Next, the base station authentication unit 104 confirms the presence or absence of the base station apparatus identification information extracted as an authentication process target in S301 (S302), and if there is such base station apparatus identification information, the authentication process proceeds to S303. If it does not proceed, the authentication process ends.

  When it is determined in S302 that there is base station apparatus identification information, the base station authentication unit 104 includes a combination (reception combination) of the base station apparatus identification information and combination information 404 stored in the base station information storage unit 108. , And a combination (maximum likelihood combination) having the largest number of base station apparatus identification information in common with the reception combination is extracted from the combinations of base station apparatus identification information stored in the base station information storage unit 108 ( S303).

  The base station authentication unit 104 extracts the base station apparatus identification information included in the maximum likelihood combination from the base station apparatus identification information included in the reception combination (S304), and the extracted base station apparatus identification information can be used. It is stored in the base station information storage unit 110 (S305). That is, the base station authenticating unit 104 authenticates the base station device identified by the base station device identification information included in the maximum likelihood combination among the base station device identification information included in the reception combination as a valid base station device. This completes the authentication process.

  The wireless communication hardware unit 106 selects, for example, the base station device having the best communication quality from the base station devices identified by the base station device identification information stored in the available base station information storage unit 110, and performs communication. Start.

  With the above configuration, even if the communication apparatus 300 transmits valid network identification information and base station apparatus identification information, the communication apparatus 300 is not included in the combination stored in the base station information storage unit 108, that is, the communication apparatus If 300 is not in a position known by the communication carrier providing mobile communication system 400, it is not authenticated as valid base station apparatus 200. Forging a combination of a plurality of base station devices 200 included in a predetermined area is more difficult than forging a single base station device 200, and therefore communication using network identification information and base station device identification information forged The possibility that the device 300 is detected as an unauthorized base station device is improved.

  In the above embodiment, the combination having the largest number of base station apparatus identification information common to the reception combination is extracted as the maximum likelihood combination, and the communication apparatus 300 not included in the maximum likelihood combination is an unauthorized base station apparatus. Although the configuration to be determined was shown, for example, among the acquired base station apparatus identification information, the determination conditions were relaxed, such as extracting all combinations including base station apparatus identification information of a predetermined ratio or more as maximum likelihood combinations. It is good also as a structure. These conditions are determined in consideration of changes in the communication environment, for example.

[Second Embodiment]
FIG. 5 is a diagram illustrating a configuration of a mobile station device 500 according to the second embodiment. The mobile station device 500 performs authentication processing using a combination of geographical information received from a plurality of communication devices (base station device 200, communication device 300), and communicates with those authenticated with the legitimate base station device 200. Execute. The mobile station device 500 includes a control unit 502, a base station authentication unit 504, a radio communication hardware unit 506, a base station information storage unit 508, an available base station information storage unit 510, and an antenna 512.

  In the mobile station device 500, the available base station information storage unit 510 and the antenna 512 are the same as the available base station information storage unit 110 and the antenna 112 of the mobile station device 100 according to the first embodiment, respectively. The description is omitted.

  The control unit 502 is realized as one function of the CPU and controls the operation of the mobile station device 500. The control unit 502 also receives network identification information, which is communication device information related to the communication device, and a base from data generated from each of a plurality of signals from the plurality of communication devices input from the wireless communication hardware unit 506. The station device identification information is acquired and output to the base station authentication unit 504. In addition, the control unit 502 acquires distance information indicating the distance between each of the plurality of communication devices and the mobile station device 500 from the data indicating the signal strength of the plurality of signals input from the wireless communication hardware unit 506. And output to the base station authentication unit 504. The signal strength has a property of becoming weaker as the communication distance becomes longer, and the distance information is acquired based on the signal strength.

  The base station authentication unit 504 is realized as a function of the CPU, and uses the network identification information, the base station device identification information, and the distance information acquired by the control unit 502, to obtain the network identification information and the base station device identification information. Authentication processing (base station device authentication processing) of the transmitted base station device 200 and communication device 300 is performed. Details of the base station apparatus authentication processing will be described later.

  The wireless communication hardware unit 506 includes a semiconductor circuit, executes communication processing such as modulation processing, amplification processing, A / D conversion, and D / A conversion, and performs wireless communication via the antenna 112. The wireless communication hardware unit 506 transmits data input from the control unit 502 via the antenna 512, generates reception data from a signal received via the antenna 512, and outputs the received data to the control unit 502. Also, the wireless communication hardware unit 506 acquires the signal strength of the signal received via the antenna 512 and outputs data indicating the acquired signal strength to the control unit 502.

  The base station information storage unit 508 includes a memory, and stores base station information regarding a plurality of valid base station apparatuses 200 included in the mobile communication system 400. Data stored in the base station information storage unit 508 is generated in advance, and is written in the base station information storage unit 508 when the mobile station device 100 is manufactured, for example. The base station information storage unit 508 has a configuration that permits rewriting of information by a predetermined method. For example, the base station information storage unit 508 can be rewritten only when a predetermined keyword is input, or a predetermined encryption / decryption process. In this configuration, writing / reading is performed via the. Details of the base station information stored in the base station information storage unit 508 will be described later.

  Details of the base station apparatus authentication process executed by the mobile station apparatus 500 will be described below. FIG. 6 is a flowchart showing a base station apparatus authentication process executed by mobile station apparatus 500.

  The base station information storage unit 508 of the mobile station device 500 stores base station information indicating a valid base station device included in the mobile communication system 400. FIG. 7 is a diagram illustrating a configuration of data stored in the base station information storage unit 508. The base station information storage unit 508 includes, as base station information indicating a valid base station apparatus, network identification information indicating the mobile communication system 400 and base station apparatuses of all the base station apparatuses 200 included in the mobile communication system 400. The identification information and each position information (for example, latitude / longitude information) are associated and stored as all base station apparatus information 700.

  The control unit 502 acquires network identification information, base station apparatus identification information, and distance information from data input from the wireless communication hardware unit 506 (S600), and outputs it to the base station authentication unit 504.

  The base station authentication unit 504 first determines whether the network identification information and the base station device identification information input from the control unit 502 are included in the all base station device information 700 (S601). To be extracted as an authentication process target.

  Next, the base station authentication unit 504 confirms the presence / absence of the base station apparatus identification information extracted as an authentication process target in S601 (S602), and if there is such base station apparatus identification information, the authentication process proceeds to S603. If it does not proceed, the authentication process ends.

  When it is determined that there is base station apparatus identification information in S602, the base station authentication unit 504 performs a determination process using distance information for the communication apparatus extracted as an authentication process target in S601 (S603).

  8 and 9 are diagrams illustrating the concept of the determination process using distance information. The base station authentication unit 504 obtains X as the distance from the communication device 800 that transmits the identification information A, obtains Y as the distance from the communication device 802 that transmits the identification information B, and transmits the identification information C. Suppose that Z is obtained as the distance to.

  The base station authentication unit 504 acquires the position information of the base station apparatus stored in association with the identification information A, B, C in the all base station apparatus information 700, and a circle centered on the point indicated by each position information And determine if there is an intersection of them. When the circle shown in FIG. 8 is drawn, since the intersection 806 exists, it is determined that all the communication devices 800, 802, and 804 are legitimate base station devices installed based on an appropriate cell design. On the other hand, when the circle shown in FIG. 9 is drawn, since there is no intersection, any of the communication devices 800, 802, and 804 is determined to be an unauthorized base station device. Then, for example, a process for obtaining a combination that minimizes the number of base station devices determined to be unauthorized is performed. In the case of FIG. 9, the communication device 804 is determined to be an unauthorized base station device.

  The base station apparatus identification information determined as a valid base station apparatus in S603 is stored in the available base station information storage unit 510 (S604). This completes the authentication process.

  The wireless communication hardware unit 506 selects a base station device having the best communication quality from among the base station devices identified by the base station device identification information stored in the available base station information storage unit 510, and performs communication. Start.

  With the above configuration, even if the communication device 300 transmits valid network identification information and base station device identification information, the communication device 300 must be in a position known by the communication carrier that provides the mobile communication system 400. Thus, it is not authenticated as a valid base station apparatus 200. It is difficult to counterfeit the distance extracted from the signal strength, and the possibility that the communication device 300 forged with the network identification information and the base station device identification information is detected as an unauthorized base station device is improved.

  In the above-described embodiment, the configuration in which the determination process is performed using the distance information indicating the distance between the mobile station device 500, the base station device 200, and the communication device 300 is shown, but the configuration using other geographical information is also possible. For example, it may be configured to use direction information indicating the direction of the communication device with respect to the mobile station device 500.

  In this case, mobile station apparatus 500 has a configuration for acquiring the arrival direction of a signal by a known method such as a method using a directional antenna, and transmits a plurality of network identification information and base station apparatus identification information. A base station apparatus determination process is performed using the signal arrival direction.

  10 and 11 are diagrams illustrating the concept of determination processing using direction information. The base station authentication unit 504 obtains north as the arrival direction of the signal including the identification information A, obtains west as the arrival direction of the signal including the identification information B, and obtains southeast as the arrival direction of the signal including the identification information C. .

  The base station authentication unit 504 acquires the position information of the base station apparatuses 1000, 1002, and 1004 stored in association with the identification information A, B, and C in the all base station apparatus information 700, and points indicated by the respective position information Then, a straight line is drawn in the opposite direction of the arrival direction of each signal (or the south direction when the signal comes from north), and it is determined whether or not there is an intersection of them. When the straight line shown in FIG. 10 is drawn, since there is an intersection 1006, all the communication devices determined as the base station devices 1000, 1002, and 1004 are all legitimate bases installed based on an appropriate cell design. It is determined as a station device. On the other hand, when the straight line shown in FIG. 11 is drawn, any of the communication devices determined to be base station devices 1000, 1002, and 1004 is determined to be an unauthorized base station device. Then, for example, a process for obtaining a combination that minimizes the number of base station devices determined to be unauthorized is performed. In the case of FIG. 11, the communication device determined to be the base station device 1002 is determined to be an unauthorized base station device.

[Third Embodiment]
FIG. 12 is a diagram illustrating a configuration of a mobile station apparatus 1200 according to the third embodiment. The mobile station apparatus 1200 performs an authentication process using position information received from the communication apparatus (base station apparatus 200 or communication apparatus 300), and performs communication with an authorized base station apparatus 200 and an authenticated one. The mobile station apparatus 1200 includes a control unit 1202, a base station authentication unit 1204, a radio communication hardware unit 1206, a base station information storage unit 1208, an available base station information storage unit 1210, and an antenna 1212.

  In the mobile station apparatus 1200, the radio communication hardware unit 1206, the usable base station information storage unit 1210, and the antenna 1212 are the same as those in the radio communication hardware unit 106 of the mobile station apparatus 100 according to the first embodiment. The station information storage unit 110 and the antenna 112 are the same as each other, and the base station information storage unit 1208 is the same as the base station information storage unit 508 according to the second embodiment, and a description thereof will be omitted.

  The control unit 1202 is realized as one function of the CPU, and controls the operation of the mobile station apparatus 1200. The control unit 1202 also receives network identification information, which is communication device information related to the communication device, from the data generated from each of the plurality of signals from the plurality of communication devices, which is input from the wireless communication hardware unit 1206, the base Station apparatus identification information and position information indicating the position of the communication apparatus are acquired and output to base station authentication section 1204. The position information is information indicating latitude and longitude, and is generated and transmitted in the communication device.

  The base station authentication unit 1204 is realized as a function of the CPU, and uses the network identification information, the mobile station apparatus identification information, and the location information received by the wireless communication hardware unit 1206 and acquired by the control unit 1202, and these information Authentication processing (base station device authentication processing) of the base station device 200 and the communication device 300 that has transmitted the above. Details of the base station apparatus authentication processing will be described later.

  Details of the base station apparatus authentication process executed by the mobile station apparatus 1200 will be described below. FIG. 13 is a flowchart showing base station apparatus authentication processing executed by mobile station apparatus 1200.

  Base station information storage section 1208 of mobile station apparatus 1200 stores base station information indicating a valid base station apparatus included in mobile communication system 400. The stored data is the same as that of the base station information storage unit 508 according to the second embodiment, as shown in FIG.

  The control unit 1202 acquires network identification information, base station apparatus identification information, and position information from the data received by the wireless communication hardware unit 1206 (S1300), and outputs them to the base station authentication unit 1204.

  Base station authentication section 1204 first determines whether network identification information and base station apparatus identification information input from control section 1202 are included in all base station apparatus information 700 stored in base station information storage section 1208. If it is not included (S1301), the communication device that transmitted the information is determined to be an unauthorized base station device (S1304), and the authentication process ends.

  In S1301, when the network identification information and the base station apparatus identification information are included in all base station apparatus information stored in the base station information storage unit 1208, the base station authentication unit 1204 associates with the base station identification information. And the positional information stored in association with the corresponding base station identification information in all base station apparatus information 700 are collated (S1302). If they do not match, the base station authentication unit 1204 determines that the communication device that transmitted the information is an unauthorized base station device (S1304), and the authentication process ends.

  In S1302, if the position information input in association with the base station identification information matches the position information stored in association with the corresponding base station identification information in all base station apparatus information 700, the position information matches. The base station apparatus identification information transmitted from the communication apparatus is stored in the available base station information storage unit 1210 (S1303). This completes the authentication process.

  The wireless communication hardware unit 1206 selects, for example, a base station device having the best communication quality from among the base station devices identified by the base station device identification information stored in the available base station information storage unit 1210, and performs communication. Start.

  With the above configuration, even if the communication device 300 transmits valid network identification information and base station device identification information, the communication device 300 must be in a position known by the communication carrier that provides the mobile communication system 400. Thus, it is not authenticated as a valid base station apparatus 200. Forgery of location information transmitted by the base station apparatus 200 has a low possibility of being executed because it affects services using the location information. By using this position information for the authentication process, the possibility that the communication device 300 forged with the network identification information and the base station device identification information is detected as an unauthorized base station device is improved.

[Fourth Embodiment]
FIG. 14 is a diagram illustrating a configuration of a mobile station apparatus 1400 according to the fourth embodiment. The mobile station apparatus 1400 performs authentication processing of the communication apparatus (base station apparatus 200 or communication apparatus 300) based on the determination result of whether or not the mobile station apparatus 1400 is located in the service area, so that a valid base station Communicate with the device 200 and the authenticated one. The mobile station apparatus 1400 includes a control unit 1402, a position information acquisition unit 1403, a base station authentication unit 1404, a wireless communication hardware unit 1406, a base station information storage unit 1408, a service area information storage unit 1409, and an available base station information storage unit. 1410 and an antenna 1412.

  In the mobile station device 1400, the wireless communication hardware unit 1406, the available base station information storage unit 1410, and the antenna 1412 are the same as the wireless communication hardware unit 106 of the mobile station device 100 according to the first embodiment, the available base. The station information storage unit 110 and the antenna 112 are the same as each other, and a description thereof will be omitted.

  The control unit 1402 is realized as one function of the CPU, and controls the operation of the mobile station apparatus 1400. In addition, the control unit 1402 is a network that is communication device information related to the base station device 200 or the communication device 300 from a signal received from the base station device 200 or the communication device 300 that is input from the wireless communication hardware unit 1406. The identification information and the communication device identification information are acquired and output to the base station authentication unit 1404.

  The position information acquisition unit 1403 is realized as a function of the CPU, and has a function of executing processing by, for example, GPS (Global Positioning System), and performs communication with the satellite via the wireless communication hardware unit 1406 to perform the mobile station apparatus. The position information (latitude information and longitude information) 1400 is acquired and output to the base station authentication unit 1404.

  The base station authentication unit 1404 is realized as a function of the CPU, and is stored in the base station apparatus identification information acquired by the control unit 1402, the terminal location information acquired by the location information acquisition unit 1403, and the service area information storage unit 1409. Authentication processing (base station device authentication processing) of the base station device 200 and the communication device 300 that transmitted the base station device identification information is performed. Details of the base station apparatus authentication processing will be described later.

  The base station information storage unit 1408 is configured by a memory, and stores base station information indicating the valid base station apparatus 200 included in the mobile communication system 400. The base station information storage unit 1408 has a configuration that permits rewriting of information by a predetermined method. For example, the base station information storage unit 1408 can be rewritten only when a predetermined keyword is input, or a predetermined encryption / decryption process. In this configuration, writing / reading is performed via the. Details of the base station information stored in the base station information storage unit 1408 will be described later.

  The service area information storage unit 1409 is configured by a memory, and stores service area information indicating a service area in which a service by the mobile communication system 400 is provided (communication is performed). The service area information storage unit 1409 has a configuration that permits rewriting of information by a predetermined method. For example, the service area information storage unit 1409 can be rewritten only when a predetermined keyword is input, or a predetermined encryption / decryption process. In this configuration, writing / reading is performed via the. Details of the service area information 1700 stored by the service area information storage unit 1409 will be described later.

  Details of the base station apparatus authentication processing executed by the mobile station apparatus 1400 will be described below. FIG. 15 is a flowchart showing base station apparatus authentication processing executed by mobile station apparatus 1400.

  Base station information storage section 1408 of mobile station apparatus 1400 stores base station information indicating a valid base station apparatus included in mobile communication system 400. FIG. 16 is a diagram illustrating a configuration of data stored in the base station information storage unit 1408. The base station information storage unit 1408 includes, as base station information indicating a legitimate base station apparatus, network identification information indicating the mobile communication system 400 and base station apparatuses of all base station apparatuses 200 included in the mobile communication system 400. The identification information is stored as all base station apparatus information 1600. These pieces of information are written in the base station information storage unit 1408, for example, when the mobile station device 1400 is manufactured.

  The service area information storage unit 1409 of the mobile station apparatus 1400 stores service area information indicating a service area in which a service by the mobile communication system 400 is provided (communication is performed). FIG. 17 is a diagram illustrating a configuration of data stored in the service area information storage unit 1409. The service area information storage unit 1409 stores, for example, the north and south latitudes and the east and west longitudes of the service area as service area information 1700. These pieces of information are written in the service area information storage unit 1409, for example, when the mobile station device 1400 is manufactured.

  The control unit 1402 acquires network identification information and base station apparatus identification information from the data received by the wireless communication hardware unit 1406 (S1500), and outputs it to the base station authentication unit 1404.

  Base station authentication section 1404 first determines whether the network identification information and base station apparatus identification information input from control section 1402 are included in all base station apparatus information 1600 stored in base station information storage section 1408. If it is not included (S1501), the communication device that transmitted the information is determined to be an unauthorized base station device (S1504), and the authentication process ends.

  In S1501, when the network identification information and the base station apparatus identification information are included in all base station apparatus information 1600 stored in the base station information storage unit 1408, the base station authentication unit 1404 causes the position information acquisition unit 1403 to It is determined whether the acquired position information is included in the area defined by the latitude and longitude indicated by the service area information 1700 stored in the service area information storage unit 1409 (S1502). The transmitted communication device is determined to be an unauthorized base station device (S1504), and the authentication process ends.

  When it is determined in S1502 that the location information is included in the area defined by the latitude and longitude stored in the service area information storage unit 1409, the base station authentication unit 1404 determines that the base station of the communication apparatus that transmitted the information The identification information is output to the available base station information storage unit 1410, and the available base station information storage unit 1410 stores the input base station identification information (S1503). This completes the authentication process.

  The wireless communication hardware unit 1406 selects a base station device having the best communication quality from among the base station devices identified by the base station device identification information stored in the available base station information storage unit 1410, and performs communication. Start.

  With the above configuration, even if the communication device 300 transmits valid network identification information and base station device identification information, if the mobile station device 1400 is not located in the service area, it is not authenticated as the valid base station device 200. . That is, even if the base station device disguises the network identification information and the base station device identification information, it is detected that the one trying to communicate outside the service area is an unauthorized base station device, and the network identification information and the base station The possibility that the communication device 300 in which the station device identification information is camouflaged is detected as an unauthorized base station device is improved.

  Note that each determination criterion in the above embodiment may be adjusted to be stricter or looser in consideration of the possibility that the information used varies depending on the communication environment.

  DESCRIPTION OF SYMBOLS 100 Mobile station apparatus, 102 Control part, 104 Base station authentication part, 106 Wireless communication hardware part, 108 Base station information storage part, 110 Available base station information storage part, 112 Antenna, 200 Base station apparatus, 300 Communication apparatus, 400 mobile communication system, 402 total base station device information, 404 combination information, 500 mobile station device, 502 control unit, 504 base station authentication unit, 506 wireless communication hardware unit, 508 base station information storage unit, 510 usable base Station information storage unit, 512 antenna, 700 All base station device information, 800, 802, 804 communication device, 1000, 1002, 1004 base station device, 806, 1006 intersection, 1200 mobile station device, 1202 control unit, 1204 base station authentication 1206 Wireless communication hardware 1208 Base station information storage unit, 1210 Available base station information storage unit, 1212 Antenna, 1400 Mobile station device, 1402 Control unit, 1403 Location information acquisition unit, 1404 Base station authentication unit, 1406 Wireless communication hardware unit, 1408 Base station information Storage unit, 1409 Service area information storage unit, 1410 Available base station information storage unit, 1412 Antenna, 1600 All base station apparatus information, 1700 Service area information.

Claims (12)

Base station apparatus information storage means for storing base station apparatus information relating to each of a plurality of base station apparatuses;
Communication device information acquisition means for acquiring communication device information related to the communication device from each of the plurality of signals received from the plurality of communication devices;
Based on the base station apparatus information and the plurality of communication apparatus information, a determination unit that performs a determination process for determining whether a communication apparatus included in the plurality of communication apparatuses is included in the plurality of base station apparatuses. When,
A mobile station apparatus comprising: In the mobile station apparatus of Claim 1,
The base station apparatus information includes identification information of each of the plurality of base station apparatuses, and combination information indicating a combination of the identification information received in a predetermined period,
The communication device information includes identification information of the communication device that has transmitted the signal that provides the communication device information,
The determination unit performs the determination process based on the combination information and the combination of the identification information acquired by the communication device information acquisition unit from each of the plurality of signals received in the period. A mobile station apparatus characterized by the above. Base station apparatus information storage means for storing identification information and position information of each of a plurality of base station apparatuses;
Communication device information acquisition means for acquiring identification information and geographical information of the communication device from each of the plurality of signals received from the plurality of communication devices;
The plurality of communications based on the identification information and position information acquired by the base station apparatus information acquisition means and the plurality of identification information and the plurality of geographical information acquired by the communication apparatus information acquisition means A determination means for performing determination processing for determining whether or not a communication device included in the device is included in the plurality of base station devices;
A mobile station apparatus comprising: In the mobile station apparatus of Claim 3,
The mobile station apparatus, wherein the geographical information is information indicating a distance between the communication apparatus that has transmitted the signal providing the geographical information and the mobile station apparatus. In the mobile station apparatus of Claim 3,
The mobile station apparatus, wherein the geographical information is information indicating a direction of the communication apparatus that has transmitted the signal providing the geographical information to the mobile station apparatus. Base station information storage means for storing identification information and position information of a plurality of base station devices;
Communication device information acquisition means for acquiring identification information and position information of the communication device from a signal received from the communication device;
Based on the identification information and the location information stored by the base station information storage unit, and the identification information and the location information acquired by the communication device information acquisition unit, the communication device is configured to receive the plurality of bases. A determination means for performing determination processing to determine whether or not included in the station device;
A mobile station apparatus comprising: Means for storing service area information indicating an area defined as being capable of communication by a mobile station device;
Means for acquiring position information of the mobile station device;
Based on the service area information and the location information, authentication means for authenticating a base station device,
A mobile station apparatus comprising: In the mobile station apparatus in any one of Claim 1 to 7,
A mobile station apparatus characterized in that the base station information storage means permits rewriting of stored information by a predetermined method. Storing base station apparatus information relating to each of a plurality of base station apparatuses;
Obtaining communication device information relating to the communication device from each of the plurality of signals received from the plurality of communication devices;
Performing a determination process for determining whether a communication device included in the plurality of communication devices is included in the plurality of base station devices based on the base station device information and the plurality of communication device information; ,
An authentication method for a base station apparatus, comprising: A base station device information acquisition step for storing identification information and position information of each of a plurality of base station devices;
A communication device information obtaining step for obtaining identification information and geographical information of the communication device from each of the plurality of signals received from the plurality of communication devices;
Based on the identification information and position information acquired in the base station apparatus information acquisition step, and the plurality of identification information and the plurality of geographical information acquired in the communication apparatus information acquisition step, the plurality of communications A determination step of performing a determination process of determining whether a communication device included in the device is included in the plurality of base station devices;
An authentication method for a base station apparatus, comprising: A base station information storage step for storing identification information and position information of a plurality of base station devices;
A communication device information acquisition step for acquiring identification information and position information of the communication device from a signal received from the communication device;
Based on the identification information and the location information stored in the base station information storage step and the identification information and the location information acquired in the communication device information acquisition step, the communication device A determination step for performing a determination process to determine whether or not included in the station device;
An authentication method for a base station apparatus, comprising: Storing service area information indicating an area defined as being capable of communication by the mobile station device;
Obtaining location information of the mobile station device;
Authenticating a base station device based on the service area information and the location information;
An authentication method for a base station apparatus, comprising:

Images